{
  "run_date": "2026-11-01",
  "events": [
    {
      "id": "09f6678f-c089-470a-8216-84377f87ff2c",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-31T20:30:47.678352+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "20d4dbe7-5464-42b2-8c0d-a11e4d13e075",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f0fc0e8a-d133-4658-8cdf-72c708f1d605",
      "domain": "macquarie.com.au",
      "domain_id": "11a5ffbd-c8d7-4aed-bf15-91605dfb9194",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-10-31T20:29:54.557641+00:00",
      "summary": "macquarie.com.au: rdap_status changed",
      "old_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "efe00f59-782f-4b1d-b69c-f50bb6267402",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "b3a9c59c-8e0f-4477-b7a7-cfab6fe97fe5",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-31T20:32:49.070407+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "new_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "93d8ddc8-6b8c-4bc1-aad8-3d6212c1a84a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "1d24cb4f-adb8-4d54-8db9-9899dbe80b5a",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-31T20:29:27.189268+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "2077f66e-3c28-499e-80e8-5bdb709614ee",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "a53bfeb3-5233-4ff2-8cac-92db78458ca4",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-31T20:31:45.630079+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "0dfe44ea-c27d-4feb-be36-3c869cd781d8",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "95b06cf2-1504-4987-bb27-5f9557f7720d",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-31T20:29:28.452434+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "2077f66e-3c28-499e-80e8-5bdb709614ee",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "d933d0bf-2f89-41b0-93e2-544adb5ec8d1",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-31T20:29:28.107629+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2077f66e-3c28-499e-80e8-5bdb709614ee",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "862d8a48-0696-4074-8b1e-d9d5bd4f6625",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:31:25.317689+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "184.28.3.190"
      ],
      "new_value": [
        "23.222.205.182"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3ef05fee-ff10-4a61-8b0b-cdb4cf970431",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "29d6867c-efb5-412d-b6c8-e24b0ca1ad66",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:30:39.882874+00:00",
      "summary": "care.org.au: a_records changed",
      "old_value": [
        "18.160.213.111",
        "18.160.213.12",
        "18.160.213.120",
        "18.160.213.8"
      ],
      "new_value": [
        "18.67.39.35",
        "18.67.39.43",
        "18.67.39.68",
        "18.67.39.96"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "35dd870c-92af-478a-b43f-22424f2d8e4a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7723e290-b54f-4ee6-8360-cb0024dd496f",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:30:40.187467+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:24d2:5200:2:88:1b80:93a1",
        "2600:9000:24d2:6200:2:88:1b80:93a1",
        "2600:9000:24d2:aa00:2:88:1b80:93a1",
        "2600:9000:24d2:c600:2:88:1b80:93a1",
        "2600:9000:24d2:d000:2:88:1b80:93a1",
        "2600:9000:24d2:dc00:2:88:1b80:93a1",
        "2600:9000:24d2:ee00:2:88:1b80:93a1",
        "2600:9000:24d2:f200:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:3400:2:88:1b80:93a1",
        "2600:9000:2348:4800:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:5200:2:88:1b80:93a1",
        "2600:9000:2348:7800:2:88:1b80:93a1",
        "2600:9000:2348:9c00:2:88:1b80:93a1",
        "2600:9000:2348:c800:2:88:1b80:93a1",
        "2600:9000:2348:ee00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "35dd870c-92af-478a-b43f-22424f2d8e4a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1462afad-1b70-4879-8b7e-cace32444dad",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:33:38.519806+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "3.169.183.116",
        "3.169.183.17",
        "3.169.183.43",
        "3.169.183.56"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c8d7594c-8c45-4154-89bc-a70c72a6c299",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "183d18fc-e826-4e57-9242-ba51e75d5513",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:31:15.740181+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "184.30.150.71",
        "184.30.150.83"
      ],
      "new_value": [
        "23.34.62.165",
        "23.34.62.171"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0a3569bd-6ed6-467d-aee2-20485c1a11ee",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "97b47941-3e57-4bc7-9c99-55851a45abe5",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:31:16.041928+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:140a:1000:b::b81e:9647",
        "2600:140a:1000:b::b81e:9653"
      ],
      "new_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0a3569bd-6ed6-467d-aee2-20485c1a11ee",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e02cc47a-b476-4243-b17f-afc7f5d3d43a",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:27:32.677233+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.201.195.32"
      ],
      "new_value": [
        "23.211.124.194",
        "23.211.124.209"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a215dd0f-dd47-4e76-a029-cecec548c168",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1220c7bb-816b-4be8-81ed-c388de8993f9",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:27:33.069053+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:ec00:25::17dc:a312",
        "2600:1404:ec00:25::17dc:a315"
      ],
      "new_value": [
        "2600:1405:7400:1d::17c2:7f2f",
        "2600:1405:7400:1d::17c2:7f37"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a215dd0f-dd47-4e76-a029-cecec548c168",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7130bf34-575c-47c3-b3c5-5002ce069712",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:27:41.788694+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.217.55.64",
        "23.217.55.68"
      ],
      "new_value": [
        "23.212.185.175",
        "23.212.185.184"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2a4105d5-16cd-4d47-a73f-85eb884dbcb1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "efcb2323-a761-4976-a626-4d158bba3978",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:32:49.375730+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "184.28.2.162"
      ],
      "new_value": [
        "23.222.204.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "93d8ddc8-6b8c-4bc1-aad8-3d6212c1a84a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0f7f29ee-6c37-4d47-ae85-2d5ed9432a7e",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:32:49.650716+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1a81::ebe",
        "2600:1409:9800:1a87::ebe",
        "2600:1409:9800:1a88::ebe",
        "2600:1409:9800:1a8e::ebe",
        "2600:1409:9800:1a8f::ebe"
      ],
      "new_value": [
        "2600:1405:8400:383::ebe",
        "2600:1405:8400:386::ebe",
        "2600:1405:8400:387::ebe",
        "2600:1405:8400:390::ebe",
        "2600:1405:8400:396::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "93d8ddc8-6b8c-4bc1-aad8-3d6212c1a84a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "45973ac1-3366-4689-b0cf-a578b83e9ae7",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:28:25.114367+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "new_value": [
        "52.85.132.107",
        "52.85.132.19",
        "52.85.132.3",
        "52.85.132.65"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0f937be0-1532-4eb6-8e14-8fe924d4e19b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e139c0ca-0e11-4a42-babb-44ad110757a1",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:28:10.770008+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "3.167.163.12",
        "3.167.163.17",
        "3.167.163.49",
        "3.167.163.64"
      ],
      "new_value": [
        "65.9.148.112",
        "65.9.148.17",
        "65.9.148.22",
        "65.9.148.81"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "13ec424c-2178-4618-976b-a70fe21678e8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "382a0a9b-e9d1-4658-a3d1-43e363ee8061",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:28:27.294303+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.220.103.68",
        "23.220.103.70"
      ],
      "new_value": [
        "23.205.110.134",
        "23.205.110.146"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f497c207-e795-4c9d-8939-3be715a975e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6e544fa3-059d-493b-bc89-72a7de5b5b03",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:28:27.646258+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:c::17c1:c8a3",
        "2600:1418:a000:c::17c1:c8b3"
      ],
      "new_value": [
        "2600:1405:7400:8::172d:7b44",
        "2600:1405:7400:8::172d:7b4e"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f497c207-e795-4c9d-8939-3be715a975e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2091cb1c-c6b5-4cd9-b3fa-9fddb7a66000",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:28:08.801973+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.48.203.132",
        "23.48.203.142"
      ],
      "new_value": [
        "23.210.216.134",
        "23.210.216.136"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b752f312-7b8d-4363-8e40-0ba24b18903d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2ee8ea68-7262-4611-9a70-b60fa3db1149",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:28:09.638224+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "new_value": [
        "2600:1406:5e00:9f::17d2:d886",
        "2600:1406:5e00:9f::17d2:d888"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b752f312-7b8d-4363-8e40-0ba24b18903d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "393d0f6e-4e06-461e-ac79-cb84a531e92b",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:32:21.530991+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "18.161.6.103",
        "18.161.6.89",
        "18.161.6.90",
        "18.161.6.96"
      ],
      "new_value": [
        "52.85.132.114",
        "52.85.132.26",
        "52.85.132.42",
        "52.85.132.78"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a111a0cb-6742-4db6-b50d-341d77378746",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "72f2a199-d53a-4931-8064-d467740e6b7b",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:32:50.017443+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.212.250.18",
        "23.212.250.20"
      ],
      "new_value": [
        "23.62.46.10",
        "23.62.46.22"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7b5434b6-a5b6-459a-9d44-3b58c1d12e28",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "98c409b4-e715-4c55-a9c2-b86462c34bae",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:31:50.798359+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "184.28.2.162"
      ],
      "new_value": [
        "23.222.204.163"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9b52b53f-d202-4b70-8c8f-3b31c4904510",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "13f100e8-bb6c-4ecb-ab97-3a62f2f5ee17",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-31T20:31:51.112588+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:1a81::ebe",
        "2600:1409:9800:1a87::ebe",
        "2600:1409:9800:1a8a::ebe",
        "2600:1409:9800:1a8e::ebe",
        "2600:1409:9800:1a8f::ebe"
      ],
      "new_value": [
        "2600:1405:8400:38a::ebe",
        "2600:1405:8400:38d::ebe",
        "2600:1405:8400:38e::ebe",
        "2600:1405:8400:392::ebe",
        "2600:1405:8400:395::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9b52b53f-d202-4b70-8c8f-3b31c4904510",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "73b8ef05-080b-4a6e-b964-c8c05697b4d0",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:31:36.665840+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "143.204.1.108",
        "143.204.1.118",
        "143.204.1.35",
        "143.204.1.38"
      ],
      "new_value": [
        "65.8.20.119",
        "65.8.20.123",
        "65.8.20.125",
        "65.8.20.66"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1bcf170e-6fd9-4c77-9a41-bfbacc945257",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6553943b-aefe-41c2-a98c-c74f86699e2a",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-31T20:31:40.350100+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.46.216.205",
        "23.46.216.209"
      ],
      "new_value": [
        "23.211.139.204",
        "23.211.139.208"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "918512bc-eb0b-4476-b97d-114ff29c631d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}